Blog Post

Window Server 2008 Failover Clustering Logs

,

In Windows 2003 failover clustering, Cluster nodes continuously putting details in log file on each node. This log is in readable plain text format & located in %SystemRoot%\Cluster folder on each node in the cluster and the name of the file is CLUSTER.LOG.

In Windows 2008, One of the major change is cluster logs logging. Microsoft change the logging mechanism & now cluster logs logging also work as per rest of Windows handles event logging. The legacy cluster.log file no more exists. In Windows 2008 the cluster log is handled by the Windows Event Tracing (ETW) process. This is the same as the System or Application Event logs you view in Event Viewer.

è Points :-

1. Cluster logs located in %windir%\Cluster\Reports directory on each node of the cluster

2. The log files are stored in an *.etl format.

3. Naming Format in Windows Server 2008

ClusterLog.etl.001

ClusterLog.etl.002

ClusterLog.etl.003

4. Naming Format in Windows Server 2008 R2

Microsoft-Windows-FailoverClustering Diagnostic.etl.001

Microsoft-Windows-FailoverClustering Diagnostic.etl.002

Microsoft-Windows-FailoverClustering Diagnostic.etl.003

5. The default size of these logs is 100MB each. You can change it as per your requirements.

6. We can have maximum 3 *.etl files.

7. The ETL.001 file is the active file being used by the live cluster service to write debug entries.

8. File rollover happens only on reboot. On reboot, new ETL.001 will be created & last file will be deleted.

9. In case, Latest ETL.001 file reach to MAX size, Data inside the file will start truncating on basis of FIFO (First In First Out). But file rollover happen only on reboot.

èHow to check cluster properties ?

Open an elevated command prompt and type the following:

C:\>cluster /prop

èHow to change the MAX size of cluster logs ?

Powershell

C:\PS>Set-ClusterLog –Size X

Command Line

c:\>cluster log /Size:X

èHow to Generate a Cluster Log in readable format ?

Command Line

SwitchEffect
c:\>cluster log /gen /COPY:”directoryDumps the logs on all nodes in the entire cluster to a single directory
c:\>cluster log /gen /SPAN:minJust dump the last X minutes of the log
c:\>cluster log /gen /NODE:”node-nameUseful when the ClusSvc is down to dump a specific node’s logs

Powershell

SwitchEffect
C:\PS> Get-ClusterLog –DestinationDumps the logs on all nodes in the entire cluster to a single directory
C:\PS> Get-ClusterLog –TimeSpanJust dump the last X minutes of the log
C:\PS> Get-ClusterLog –NodeUseful when the ClusSvc is down to dump a specific node’s logs

èHow to Change the level of the Cluster Log

Default cluster log level (ClusterLogLevel) is 3. Which is same as windows 2003 logging. You can have max level 5 to have more detailed information for analysis. Using higher level of level may impact system performance as well.

LevelErrorWarningInfoVerboseDebug
0 (Disabled)
1X
2XX
3

(Default)

XXX
4XXXX
5XXXXX

Powershell

C:\PS>Set-ClusterLog –Level X

Command Line

c:\>cluster log /Level:X

Reference : Rohit Garg (http://mssqlfun.com/)

You can find and follow MSSQLFUN :-

http://www.facebook.com/mssqlfun

http://mssqlfun.com/feed

https://twitter.com/Rgarg86

Other Linked Profiles :-

http://www.sqlservercentral.com/blogs/mssqlfun/

http://social.msdn.microsoft.com/Profile/rohitgarg

http://www.toadworld.com/members/rohit-garg/blogs/default.aspx

http://beyondrelational.com/members/RohitGarg/default.aspx

Rate

You rated this post out of 5. Change rating

Share

Share

Rate

You rated this post out of 5. Change rating